@odla-ai/chapter 0.60.0 → 0.62.0

package/dist/index.d.ts

@@ -147,11 +147,26 @@ declare const CHAPTER_EMAIL_EVENTS: Readonly<Record<string, ChapterEmailEvent>>;
 /** Resolve the event inventory for the site's actual send surfaces. Hub mail uses its declared CRM templates. */
 declare function chapterEmailEvents(chapter: Chapter): Record<string, ChapterEmailEvent>;
 
-type TextFields$1<Key extends string> = {
+type TextFields$2<Key extends string> = {
     [Field in Key]: string;
 };
 /** User-visible language for sharing, delivery state, and leader rollups. */
-type AdminNetworkCopy = TextFields$1<"title" | "allowlistDescription" | "sharing" | "shareWith" | "shared" | "shareFailed" | "deliveryFailed" | "loadingRollup" | "loadRollupFailed" | "overview" | "configuredFollowers" | "reachableFollowers" | "recordsAcrossFollowers" | "noFollowers" | "followers" | "available" | "unavailable" | "transportReachable" | "transportUnavailable" | "transportNotChecked" | "edgeUnpaired" | "edgeUnpairedHint" | "bindingTransport" | "urlTransport" | "activeConfiguration" | "noActiveConfiguration" | "publicSiteAvailable" | "publicSiteUnavailable" | "publicSiteNotChecked" | "recordTotals" | "noRecordTotals">;
+type AdminNetworkCopy = TextFields$2<"title" | "allowlistDescription" | "sharing" | "shareWith" | "shared" | "shareFailed" | "deliveryFailed" | "loadingRollup" | "loadRollupFailed" | "overview" | "configuredFollowers" | "reachableFollowers" | "recordsAcrossFollowers" | "noFollowers" | "followers" | "available" | "unavailable" | "transportReachable" | "transportUnavailable" | "transportNotChecked" | "edgeUnpaired" | "edgeUnpairedHint" | "bindingTransport" | "urlTransport" | "activeConfiguration" | "noActiveConfiguration" | "publicSiteAvailable" | "publicSiteUnavailable" | "publicSiteNotChecked" | "recordTotals" | "noRecordTotals">;
+
+type TextFields$1<Key extends string> = {
+    [Field in Key]: string;
+};
+/**
+ * Member portal language. Placeholders in braces are filled by
+ * `formatChapterCopy()`. Sites override any field through `copy.portal`.
+ */
+interface PortalCopy {
+    shell: TextFields$1<"navLabel" | "welcomeBack" | "home" | "backHome" | "yourProfile" | "signedInAs" | "signOut" | "adminConsole" | "openMenu" | "closeMenu" | "locked" | "loading" | "loadFailed" | "notFound">;
+    pages: TextFields$1<"comingSoon" | "comingIn" | "includedWith" | "upgrade" | "comingToPortal" | "tagNew" | "tagSoon">;
+    profile: TextFields$1<"eyebrow" | "editProfile" | "saveProfile" | "saving" | "cancel" | "uploadPhoto" | "changePhoto" | "photoUploading" | "photoFailed" | "memberSince" | "promptsTitle" | "promptsNote" | "answerEmpty" | "addPrompt" | "howYouFoundUs" | "referredBy" | "referredByNote" | "introducedBy" | "introducedByPlaceholder" | "namePlaceholder" | "locationPlaceholder" | "saved" | "conflict" | "saveFailed">;
+}
+/** Neutral defaults; a site supplies its own voice. */
+declare const DEFAULT_PORTAL_COPY: PortalCopy;
 
 /** Copy for the person record panels: lifecycle actions, comms, scheduling, billing and meetings. */
 type AdminRecordsCopy = {
@@ -201,11 +216,13 @@ interface ChapterCopy {
     members: {
         loadFailed: string;
         account: TextFields<"signOut" | "adminConsole">;
-        provisional: TextFields<"cardLabel" | "applicationNeeded" | "applicationNeededBody" | "apply" | "refunded" | "refundedBody" | "active" | "renews" | "introductionCall" | "calendarInvite" | "joinCall" | "bookCall" | "bookCallBody" | "chooseTime">;
+        provisional: TextFields<"cardLabel" | "applicationNeeded" | "applicationNeededBody" | "apply" | "refunded" | "refundedBody" | "declined" | "declinedBody" | "active" | "renews" | "introductionCall" | "calendarInvite" | "joinCall" | "bookCall" | "bookCallBody" | "chooseTime">;
         full: TextFields<"welcome">;
         gifts: TextFields<"title" | "body" | "noneAvailable" | "paid" | "saveCode" | "purchases" | "noPurchases" | "pending" | "redeemed" | "expired" | "revoked" | "rotate" | "rotated" | "rotateFailed" | "redeemTitle" | "code" | "redeem" | "redeemFailed">;
         reschedule: TextFields<"changeTime" | "unavailable" | "loadFailed" | "slotGone" | "loading" | "noTimes" | "rescheduling" | "keepTime">;
     };
+    /** Signed-in member portal: shell, pages, profile. */
+    portal: PortalCopy;
     admin: {
         auth: TextFields<"checking" | "notAuthorized" | "accountNotAuthorized" | "thisAccount" | "signOut" | "loading" | "signInNotConfigured" | "missingPublishableKey" | "noWorkspaces" | "signInTagline">;
         shell: TextFields<"adminRole" | "adminConsole" | "adminName" | "navigationLabel">;
@@ -215,7 +232,7 @@ interface ChapterCopy {
         availability: TextFields<"loading" | "loadFailed" | "saved" | "title" | "days" | "startHour" | "endHour" | "slotMinutes" | "minNoticeHours" | "windowDays" | "timezone" | "summaryTemplate" | "save"> & {
             dayLabels: readonly string[];
         };
-        email: TextFields<"loading" | "loadFailed" | "saved" | "sent" | "testFailed" | "delivery" | "notificationAddress" | "replyTo" | "fromName" | "fromNameHint" | "spamRisk" | "debugInbox" | "debugInboxHint" | "sendTest" | "enabled" | "subject" | "body" | "save" | "sendLog" | "sentColumn" | "templateColumn" | "statusColumn" | "toColumn" | "failed" | "redirected" | "delivered">;
+        email: TextFields<"loading" | "loadFailed" | "saved" | "sent" | "testFailed" | "delivery" | "notificationAddress" | "replyTo" | "fromName" | "fromNameHint" | "spamRisk" | "debugInbox" | "debugInboxHint" | "sendTest" | "enabled" | "subject" | "body" | "htmlBody" | "htmlBodyHint" | "save" | "sendLog" | "sentColumn" | "templateColumn" | "statusColumn" | "toColumn" | "failed" | "redirected" | "delivered">;
         meetings: TextFields<"loading" | "loadFailed" | "cancelConfirm" | "newStartPrompt" | "parseFailed" | "agenda" | "empty" | "unknown" | "drift" | "meet" | "reschedule" | "cancel">;
         admission: TextFields<"title" | "description" | "email" | "decision" | "expires" | "note" | "waive" | "require" | "add" | "ledger" | "loading" | "consumed" | "revoked" | "expired" | "active" | "local" | "parent" | "revoke">;
         network: AdminNetworkCopy;
@@ -268,6 +285,51 @@ interface ResolvedMemberContent {
     } | null;
 }
 
+/** Invite links and referral credit for a chapter-mode site. */
+interface ChapterMemberReferrals {
+    /** Public path that invite links live under; `<path>/<code>`. Defaults to `/join`. */
+    path?: string;
+    /** Where an invite link sends a visitor (absolute https URL or site path). `?ref=<code>` is appended. */
+    membershipUrl: string;
+    /** Lifetime of the first-party referral cookie, in days. Defaults to 90. */
+    cookieDays?: number;
+    /**
+     * Credit a dues-paying referrer earns when a friend they referred is approved
+     * on a dues-paying tier. Omit or `false` for invite links without credit.
+     */
+    credit?: {
+        valueCents: number;
+    } | false;
+}
+/** The signed-in member portal. Its navigation and access come from the member-content catalog. */
+interface ChapterMemberPortal {
+    /** Prompts a member may answer on their profile, in display order. */
+    profilePrompts?: readonly string[];
+    /** How many prompts a member may answer. Defaults to 3. */
+    maxPrompts?: number;
+    /** Member profile photos in odla-db file storage. Defaults to true. */
+    photos?: boolean;
+    /** Cohort courses on one recurring Google Calendar event. Chapter mode only. */
+    courses?: boolean;
+    /** Personal invite links, Referred by, and optional credit. Chapter mode only. */
+    referrals?: ChapterMemberReferrals;
+}
+/** Resolved invite-link settings. */
+interface ResolvedMemberReferrals {
+    path: string;
+    membershipUrl: string;
+    cookieDays: number;
+    creditCents: number | null;
+}
+/** Resolved member portal settings. */
+interface ResolvedMemberPortal {
+    profilePrompts: readonly string[];
+    maxPrompts: number;
+    photos: boolean;
+    courses: boolean;
+    referrals: ResolvedMemberReferrals | null;
+}
+
 /** Optional private Builder Library shared across Built Not Found and Chapters. */
 interface ChapterBuilderLibrary {
     /** Keep local admin authoring enabled. Defaults to true. */
@@ -484,6 +546,82 @@ interface ResolvedNetwork {
     readers: readonly ResolvedNetworkReader[];
 }
 
+/** Brand identity and build-time tokens from the checked-in Chapter config. */
+/** Typed semantic roles shared by the public site and application surfaces. */
+interface ChapterBrandTokens {
+    background?: string;
+    surface?: string;
+    surface2?: string;
+    text?: string;
+    textMuted?: string;
+    textFaint?: string;
+    border?: string;
+    borderStrong?: string;
+    accent?: string;
+    accentStrong?: string;
+    accentSoft?: string;
+    onAccent?: string;
+    good?: string;
+    warn?: string;
+    danger?: string;
+    chart1?: string;
+    chart2?: string;
+    chart3?: string;
+    chart4?: string;
+    chart5?: string;
+    chart6?: string;
+    chartPositive?: string;
+    chartNegative?: string;
+    /** Admin/application content width, e.g. `"960px"`. */
+    contentWidth?: string;
+    panelRadius?: string;
+    panelShadow?: string;
+    masterDetailColumns?: string;
+    masterDetailMinHeight?: string;
+    /** Chapter-admin page padding shorthand. */
+    pagePadding?: string;
+    /** Chapter-admin workspace-tab padding shorthand. */
+    workspacePadding?: string;
+}
+/** Brand tokens that theme the site: theme, semantic roles, fonts, and logos. */
+interface ChapterBrand {
+    /** Preloaded @odla-ai/ui theme name used by ThemeScope. */
+    theme?: string;
+    /** Named accent family supplied by the selected @odla-ai/ui theme. */
+    accent?: string;
+    /** Admin/application color mode. Explicit light is the safe default. */
+    colorScheme?: "light" | "dark" | "system";
+    tokens?: ChapterBrandTokens;
+    tokensDark?: ChapterBrandTokens;
+    /** Palette overrides written into styles.css :root (e.g. `{ moss: "#2F3E34" }`
+     * or `--ui-*` token names). Applies in BOTH light and dark unless overridden
+     * by {@link paletteDark}. */
+    palette?: Record<string, string>;
+    /** Dark-mode palette overrides. Same shape as {@link palette}; emitted under
+     *  `:root[data-theme="dark"]` and `@media (prefers-color-scheme: dark)`, so a
+     *  site brands both modes. */
+    paletteDark?: Record<string, string>;
+    /** Full token map for `.ui-invert` islands. A compiled custom theme normally
+     * uses its dark map here so inverted content never inherits stale composites. */
+    paletteInvert?: Record<string, string>;
+    fonts?: {
+        display?: string;
+        body?: string;
+        numeral?: string;
+    };
+    /** Short glyph used in compact admin chrome. Defaults to the first three
+     * letters of the chapter name. */
+    badge?: string;
+    wordmark?: string;
+    tagline?: string;
+    /** Header/footer nav sections for the web-component chrome: label → entries. */
+    nav?: Record<string, ReadonlyArray<{
+        label: string;
+        href: string;
+    }>>;
+    logos?: string;
+}
+
 /**
  * Membership pricing for the group row (chapter mode).
  *
@@ -570,80 +708,18 @@ interface ChapterDb {
     secrets: {
         get(name: string): Promise<string>;
     };
-}
-/** Typed semantic roles shared by the public site and application surfaces. */
-interface ChapterBrandTokens {
-    background?: string;
-    surface?: string;
-    surface2?: string;
-    text?: string;
-    textMuted?: string;
-    textFaint?: string;
-    border?: string;
-    borderStrong?: string;
-    accent?: string;
-    accentStrong?: string;
-    accentSoft?: string;
-    onAccent?: string;
-    good?: string;
-    warn?: string;
-    danger?: string;
-    chart1?: string;
-    chart2?: string;
-    chart3?: string;
-    chart4?: string;
-    chart5?: string;
-    chart6?: string;
-    chartPositive?: string;
-    chartNegative?: string;
-    /** Admin/application content width, e.g. `"960px"`. */
-    contentWidth?: string;
-    panelRadius?: string;
-    panelShadow?: string;
-    masterDetailColumns?: string;
-    masterDetailMinHeight?: string;
-    /** Chapter-admin page padding shorthand. */
-    pagePadding?: string;
-    /** Chapter-admin workspace-tab padding shorthand. */
-    workspacePadding?: string;
-}
-/** Brand tokens that theme the site: theme, semantic roles, fonts, and logos. */
-interface ChapterBrand {
-    /** Preloaded @odla-ai/ui theme name used by ThemeScope. */
-    theme?: string;
-    /** Named accent family supplied by the selected @odla-ai/ui theme. */
-    accent?: string;
-    /** Admin/application color mode. Explicit light is the safe default. */
-    colorScheme?: "light" | "dark" | "system";
-    tokens?: ChapterBrandTokens;
-    tokensDark?: ChapterBrandTokens;
-    /** Palette overrides written into styles.css :root (e.g. `{ moss: "#2F3E34" }`
-     * or `--ui-*` token names). Applies in BOTH light and dark unless overridden
-     * by {@link paletteDark}. */
-    palette?: Record<string, string>;
-    /** Dark-mode palette overrides. Same shape as {@link palette}; emitted under
-     *  `:root[data-theme="dark"]` and `@media (prefers-color-scheme: dark)`, so a
-     *  site brands both modes. */
-    paletteDark?: Record<string, string>;
-    /** Full token map for `.ui-invert` islands. A compiled custom theme normally
-     * uses its dark map here so inverted content never inherits stale composites. */
-    paletteInvert?: Record<string, string>;
-    fonts?: {
-        display?: string;
-        body?: string;
-        numeral?: string;
+    /** odla-db file storage (present on the real client). Member photos use it. */
+    storage?: {
+        upload(path: string, data: BodyInit, contentType?: string, opts?: {
+            private?: boolean;
+        }): Promise<{
+            path: string;
+            size: number;
+            contentType: string;
+        }>;
+        sign(path: string, ttlSeconds?: number): Promise<string>;
+        delete(path: string): Promise<void>;
     };
-    /** Short glyph used in compact admin chrome. Defaults to the first three
-     * letters of the chapter name. */
-    badge?: string;
-    wordmark?: string;
-    tagline?: string;
-    /** Header/footer nav sections for the web-component chrome: label → entries. */
-    nav?: Record<string, ReadonlyArray<{
-        label: string;
-        href: string;
-    }>>;
-    logos?: string;
 }
 
 /** One owner-editable transactional email template. Automatic sends require explicit `enabled: true`. */
@@ -705,6 +781,8 @@ interface ChapterAuth {
      * app allowlist; `"odla"` reads protected `$users.role` by exact subject ID.
      * Default `"odla"` for private Clerk mode, `"table"` for legacy modes. */
     superAdminSource?: "table" | "odla";
+    /** Require a second sign-in factor on admin routes: `off` (default), `report` (allow and log), `enforce`. */
+    adminSecondFactor?: "off" | "report" | "enforce";
 }
 /** The fully-resolved auth policy (defaults applied) carried on the {@link Chapter}. */
 interface ResolvedAuth {
@@ -715,6 +793,7 @@ interface ResolvedAuth {
     adminRole: string;
     superAdmins: boolean;
     superAdminSource: "none" | "table" | "odla";
+    adminSecondFactor: "off" | "report" | "enforce";
 }
 /** The application status pipeline. Which statuses exist, and the subsets a site
  *  allows a call to be booked from / an application approved from. Defaults to
@@ -810,6 +889,8 @@ interface ChapterConfig {
     signupControl?: ChapterSignupControl;
     /** Authenticated parent + chapter member pages with server-enforced tier access. */
     memberContent?: ChapterMemberContent;
+    /** Signed-in member portal: profile, photos, courses, invite links and credit. */
+    memberPortal?: ChapterMemberPortal;
     /** Private docs, Brand asset references, and links for authorized site-building agents. */
     builderLibrary?: ChapterBuilderLibrary;
     /** Network-scoped canonical Person registry. Shadow mode is additive only:
@@ -915,6 +996,8 @@ interface Chapter {
     signupControl: ResolvedSignupControl | null;
     /** Null unless the standard authenticated member-content surface is enabled. */
     memberContent: ResolvedMemberContent | null;
+    /** Null unless the member portal is enabled. */
+    memberPortal: ResolvedMemberPortal | null;
     /** Null unless the private scoped Builder Library is enabled. */
     builderLibrary: ResolvedBuilderLibrary | null;
     /** Null unless this hub explicitly enables the shadow Person registry. */
@@ -1105,7 +1188,7 @@ declare function normalizeNetworkCommercialStripeEvent(input: unknown, digest: s
 /** Deterministically rebuild the network commercial projection from its event log. */
 declare function projectNetworkCommercialEvents(input: readonly NetworkCommercialFact[], sources: readonly NetworkCommercialSource[]): NetworkCommercialProjection;
 
-type Row = Record<string, unknown>;
+type Row$2 = Record<string, unknown>;
 /** Exact chapter/runtime partition that binds every parity digest. */
 interface CommercialParityPartition {
     appId: string;
@@ -1166,7 +1249,7 @@ interface CommercialParityResult {
 declare function commercialParityDigest(secret: string, partition: CommercialParityPartition, kind: "application" | "customer" | "subscription", value: string): Promise<string>;
 /** Build the bounded disclosure from already-bounded local application rows. */
 declare function buildChapterCommercialParitySnapshot(input: {
-    rows: readonly Row[];
+    rows: readonly Row$2[];
     secret: string;
     partition: CommercialParityPartition;
     siteId: string;
@@ -1993,13 +2076,78 @@ declare const membershipAuthorityEntities: Record<string, Entity>;
 /** Backend-only authority; browser roles, including a network admin, cannot directly change these rows. */
 declare const membershipAuthorityRules: DbRules;
 
+/**
+ * Member catalog schema version 2: ordered navigation sections, page kinds,
+ * navigation tags and icons. Version 1 documents remain valid and keep their
+ * alphabetical section order; every field here requires `schemaVersion: 2`.
+ */
+/** Packaged member features a catalog page can stand for. */
+declare const MEMBER_PAGE_FEATURES: readonly ["course", "share"];
+/** A packaged member feature: `course` (cohort course) or `share` (invite kit). */
+type MemberPageFeatureName = typeof MEMBER_PAGE_FEATURES[number];
+/** Fixed icon vocabulary. Content never carries SVG, URLs or markup. */
+declare const MEMBER_PAGE_ICONS: readonly ["home", "course", "library", "deals", "training", "events", "members", "share", "profile", "document", "calendar", "chat", "star"];
+/** One icon from {@link MEMBER_PAGE_ICONS}. */
+type MemberPageIcon = typeof MEMBER_PAGE_ICONS[number];
+/** Authored navigation tags. "Soon" and year tags are derived from placeholder pages. */
+declare const MEMBER_PAGE_TAGS: readonly ["new"];
+/** One tag from {@link MEMBER_PAGE_TAGS}. */
+type MemberPageTag = typeof MEMBER_PAGE_TAGS[number];
+/** How a page renders: authored Markdown, a not-yet-open placeholder, or a packaged feature. */
+type MemberPageKind = "markdown" | "placeholder" | "feature";
+/**
+ * A page that is announced but not open. Without `availableYear` it reads as
+ * "Coming soon"; with one, as "Coming in <year>".
+ */
+interface MemberPagePlaceholder {
+    /** Calendar year the page is expected to open. */
+    availableYear?: number;
+    /** Replaces the derived "Coming soon" / "Coming in <year>" badge text. */
+    badge?: string;
+    /** Label of a disabled call to action, e.g. "Investor form opens in 2027". */
+    actionLabel?: string;
+}
+/** A catalog page backed by a packaged feature, gated by the page's audience. */
+interface MemberPageFeature {
+    name: MemberPageFeatureName;
+    /** Feature-specific identity, e.g. the course id for `course`. */
+    ref?: string;
+}
+/**
+ * One navigation group. A section without a label renders without a heading.
+ * Section order is the order of the document's `sections` array.
+ */
+interface MemberContentSection {
+    id: string;
+    label?: string;
+}
+interface SectionedDocument {
+    sections?: readonly MemberContentSection[];
+}
+interface SectionedPage {
+    navigation: {
+        section: string;
+    };
+}
+/**
+ * Resolve display order for composed sections. Chapter-declared sections come
+ * first, in the chapter's order (a chapter may list a parent section id to
+ * place it, inheriting the parent's label when it gives none). Parent-declared
+ * sections follow in the parent's order. Sections named only by pages (version
+ * 1 labels, or documents without `sections`) follow alphabetically, which is
+ * exactly the version 1 order. Sections without pages are dropped.
+ */
+declare function composeMemberSections(parent: SectionedDocument | null | undefined, chapter: SectionedDocument | null | undefined, pages: readonly SectionedPage[]): MemberContentSection[];
+
 /** Validate one complete parent or chapter authoring layer with actionable paths. */
 declare function validateMemberContentDocument(input: unknown, options?: MemberContentValidationOptions): MemberContentValidationResult;
 /** Validate or fail closed with every actionable document error. */
 declare function memberContentDocument(input: unknown, options?: MemberContentValidationOptions): MemberContentDocument;
 
-/** Versioned contract for authenticated member content. */
-declare const MEMBER_CONTENT_SCHEMA_VERSION: 1;
+/** Latest version of the authenticated member-content contract. Version 1 documents remain valid. */
+declare const MEMBER_CONTENT_SCHEMA_VERSION: 2;
+/** Every member-content schema version this release validates. */
+type MemberContentSchemaVersion = 1 | 2;
 /** Authenticated member projection endpoint. */
 declare const MEMBER_CONTENT_PATH: "/api/member-content";
 /** Dedicated signed Parent → Chapter content-delivery endpoint. */
@@ -2018,9 +2166,14 @@ interface MemberContentTarget {
 }
 /** Navigation is data, so agents do not have to coordinate route code. */
 interface MemberPageNavigation {
+    /** A section id declared in `sections`, or (without `sections`) the section's display label. */
     section: string;
     order: number;
     parentId?: string;
+    /** Schema version 2. */
+    tag?: MemberPageTag;
+    /** Schema version 2. */
+    icon?: MemberPageIcon;
 }
 /** Explicit sets avoid unsafe assumptions that commercial tiers form a ladder. */
 type MemberPageAudience = {
@@ -2054,9 +2207,15 @@ interface MemberContentPage {
     audience: MemberPageAudience;
     /** Safe Markdown shown while the body is withheld. */
     teaserMarkdown?: string;
-    /** Never serialized to a viewer whose audience does not match. */
-    bodyMarkdown: string;
+    /** Never serialized to a viewer whose audience does not match. Required for Markdown pages. */
+    bodyMarkdown?: string;
     upsell?: MemberPageUpsell;
+    /** Schema version 2; defaults to `markdown`. */
+    kind?: MemberPageKind;
+    /** Schema version 2; present exactly when `kind` is `placeholder`. */
+    placeholder?: MemberPagePlaceholder;
+    /** Schema version 2; present exactly when `kind` is `feature`. */
+    feature?: MemberPageFeature;
 }
 /** Chapter-owned offer attached to a Parent page that delegated offer authority. */
 interface MemberPageUpsellOverride {
@@ -2065,13 +2224,15 @@ interface MemberPageUpsellOverride {
 }
 /** One complete source layer. Parent and Chapter layers are stored independently. */
 interface MemberContentDocument {
-    schemaVersion: typeof MEMBER_CONTENT_SCHEMA_VERSION;
+    schemaVersion: MemberContentSchemaVersion;
     revision: number;
     generatedAt: number;
     source: MemberContentSource;
     target?: MemberContentTarget;
     pages: readonly MemberContentPage[];
     upsellOverrides?: readonly MemberPageUpsellOverride[];
+    /** Schema version 2: navigation groups in display order. */
+    sections?: readonly MemberContentSection[];
 }
 /** Provider-neutral tier facts used to validate access and resolve safe offers. */
 interface MemberContentTierAuthority {
@@ -2102,6 +2263,8 @@ interface EffectiveMemberContentPage extends MemberContentPage {
 /** Deterministically ordered parent and chapter layers with their source revisions. */
 interface EffectiveMemberContent {
     pages: readonly EffectiveMemberContentPage[];
+    /** Navigation groups in display order; only groups that have pages. Always set by `composeMemberContent`. */
+    sections?: readonly MemberContentSection[];
     parentRevision: number | null;
     chapterRevision: number | null;
 }
@@ -2125,6 +2288,10 @@ interface MemberContentPageProjection {
     audience: MemberPageAudience;
     source: MemberContentSource;
     access: "allowed" | "locked";
+    /** Always sent by the server; a hand-built preview may omit it to mean `markdown`. */
+    kind?: MemberPageKind;
+    placeholder?: MemberPagePlaceholder;
+    feature?: MemberPageFeature;
     teaserMarkdown?: string;
     bodyMarkdown?: string;
     upsell?: ResolvedMemberPageUpsell;
@@ -2132,6 +2299,8 @@ interface MemberContentPageProjection {
 /** Complete viewer-safe member navigation and revision projection. */
 interface MemberContentProjection {
     pages: readonly MemberContentPageProjection[];
+    /** Always sent by the server; a hand-built preview may omit it. */
+    sections?: readonly MemberContentSection[];
     viewer: {
         tierId: string | null;
         admin: boolean;
@@ -2160,6 +2329,17 @@ type MemberContentRejection = "invalid_document" | "invalid_digest" | "wrong_sou
 
 /** Compose immutable Parent content with independently stored Chapter content. */
 declare function composeMemberContent(parent: MemberContentDocument | null | undefined, chapter: MemberContentDocument | null | undefined): EffectiveMemberContent;
+/**
+ * The single member-content access decision. A page's lock in the catalog and
+ * the API routes of the feature it stands for both come from this function.
+ */
+declare const memberPageAllowed: (page: MemberContentPage, viewer: MemberContentViewer) => boolean;
+/**
+ * Whether a viewer may use a packaged feature. A feature is enabled only by a
+ * catalog page of kind `feature` naming it (and `ref`, when given); access is
+ * that page's audience. No page means the feature is off for everyone.
+ */
+declare function memberFeatureAccess(content: Pick<EffectiveMemberContent, "pages">, viewer: MemberContentViewer, name: MemberPageFeatureName, ref?: string): "allowed" | "locked" | "absent";
 /** Restricted bodies are omitted and authored offers are joined to live tier authority. */
 declare function projectMemberContent(content: EffectiveMemberContent, viewer: MemberContentViewer, tiers: readonly MemberContentTierAuthority[]): MemberContentProjection;
 
@@ -2335,6 +2515,129 @@ declare function createBuilderLibraryEnvelope(document: BuilderLibraryDocument):
     digest: string;
 }>;
 
+/**
+ * Validate the member portal. Courses and invite links are chapter-mode
+ * features and need the member-content catalog, whose feature pages switch
+ * them on and decide who may use them.
+ */
+declare function resolveMemberPortal(mode: ChapterMode, input: ChapterMemberPortal | undefined, hasMemberContent: boolean): ResolvedMemberPortal | null;
+
+/** Namespaces the configured member portal needs. All are deny-all to clients. */
+declare function memberPortalEntities(mode: ChapterMode, portal: ResolvedMemberPortal | null, hasMemberContent: boolean): Record<string, Entity>;
+
+type Row$1 = Record<string, unknown>;
+/**
+ * The signed-in person as a member of this site, independent of mode. In a
+ * chapter the member is their application and access is the membership
+ * authority's answer; in a hub the member is an active admin grant and there
+ * are no tiers. Administrative roles never make someone a member.
+ */
+interface PortalMember {
+    /** Stable key for portal rows: the application id, or the hub grant id. */
+    memberId: string;
+    source: "application" | "hub-grant";
+    email: string;
+    firstName?: string;
+    lastName?: string;
+    tierId: string | null;
+    /** When membership began (epoch ms), for "Member since". */
+    memberSince: number | null;
+    row: Row$1;
+}
+/** `member` only for someone with current member access. */
+type PortalMemberResult = {
+    status: "member";
+    member: PortalMember;
+} | {
+    status: "not-member";
+    row?: Row$1;
+} | {
+    status: "unavailable";
+};
+/** The member's own identity block, as `/api/me` returns it under `portal`. */
+interface PortalIdentity {
+    memberId: string;
+    tier: {
+        id: string;
+        name: string;
+    } | null;
+    memberSince: number | null;
+    displayName: string;
+    firstName: string | null;
+    initials: string;
+    location: string | null;
+    photoUrl: string | null;
+}
+/** First letters of the first and last words, uppercased: "Jane Morgan" → "JM". */
+declare function initialsOf(name: string): string;
+
+/**
+ * Profile fields a member edits, each mapped to the authority contract row
+ * that permits it. A field the contract stops listing becomes read-only here.
+ */
+declare const MEMBER_PROFILE_FIELDS: {
+    readonly preferredName: "person.preferredName";
+    readonly location: "person.region";
+    readonly prompts: "person.profilePrompts";
+    readonly introducedByText: "person.introducedByText";
+};
+/** One editable profile field name. */
+type MemberProfileField = keyof typeof MEMBER_PROFILE_FIELDS;
+/** One answered prompt. */
+interface MemberProfilePrompt {
+    prompt: string;
+    answer: string;
+}
+/** A validated profile edit. Absent keys are left as they are. */
+interface MemberProfilePatch {
+    preferredName?: string | null;
+    location?: string | null;
+    prompts?: MemberProfilePrompt[];
+    introducedByText?: string | null;
+}
+/** Answers are short and plain; control characters never reach storage. */
+declare const MAX_PROMPT_ANSWER = 280;
+/** Validate a member's PUT body against the contract and the site's prompt list. */
+declare function validateProfilePatch(body: Record<string, unknown>, portal: Pick<ResolvedMemberPortal, "profilePrompts" | "maxPrompts">): {
+    ok: true;
+    patch: MemberProfilePatch;
+} | {
+    ok: false;
+    errors: string[];
+};
+/** Normalize a person's name for exact matching: case, spacing and surrounding punctuation ignored. */
+declare const nameKey: (value: string) => string;
+/** "Maria Lopez" → "Maria L.": how a member sees another member's name. */
+declare function shortName(firstName: unknown, lastName: unknown): string;
+
+/** The signed-in member's own profile. */
+declare const MEMBER_PROFILE_PATH = "/api/member/profile";
+/** Upload (POST) the member's own photo as a raw JPEG or PNG body. */
+declare const MEMBER_PHOTO_PATH = "/api/member/profile/photo";
+/** The largest photo accepted, before cleaning. */
+declare const MAX_PHOTO_BYTES: number;
+/** Photos are resized in the browser; the stored image is at most this many pixels a side. */
+declare const PHOTO_SIZE = 400;
+
+/** Admin roster for a hub's members. A grant is member access only; it never touches admin roles. */
+declare const HUB_MEMBERS_PATH = "/api/admin/hub-members";
+
+/**
+ * Byte-level image hygiene for member photos, with no decoder: identify JPEG or
+ * PNG by magic bytes, read dimensions, and rebuild the file keeping only what
+ * is needed to draw it. EXIF (including GPS), XMP, ICC-free comments and PNG
+ * text chunks never reach storage.
+ */
+interface CleanImage {
+    contentType: "image/jpeg" | "image/png";
+    extension: "jpg" | "png";
+    width: number;
+    height: number;
+    bytes: Uint8Array;
+}
+/** Identify and clean a JPEG or PNG. Anything else, or a malformed file, is null. */
+declare function cleanImage(bytes: Uint8Array): CleanImage | null;
+
 /** The default shared CRM graph: people (with the application/member pipeline)
  * plus businesses and the `works_at` relation, in both modes. */
 declare function defaultCrm(mode: ChapterMode): CrmConfig;
@@ -2400,10 +2703,31 @@ interface SecretStore {
  */
 declare function getVaultSecret(db: SecretStore, name: string): Promise<string | undefined>;
 
-/** One owner-editable template row on the group. Automatic sends require `enabled:true`. */
+/** `{{placeholder}}` substitution with `{{#name}} … {{/name}}` sections; unknown placeholders render empty. */
+declare function render(template: string, vars: Record<string, string>): string;
+/** Largest HTML body a template may carry; a full table-based email is well under this. */
+declare const HTML_BODY_LIMIT = 200000;
+/**
+ * Render a template's HTML body: the same placeholders and sections as the text,
+ * every value HTML-escaped, and line breaks inside a value (the refund policy,
+ * the commitment) kept as `<br>`. Markup belongs to the template, never to a value.
+ */
+declare function renderHtmlBody(template: string, vars: Record<string, string>): string;
+/** Problems in an HTML body: size, unbalanced sections, placeholders the event does not supply, and missing values. */
+declare function htmlBodyIssues(html: string, options: {
+    allowedVariables?: readonly string[];
+    optionalVariables?: readonly string[];
+    values?: Record<string, string>;
+}): EmailCopyIssue[];
+
+/** One owner-editable template row on the group. Automatic sends require `enabled:true`.
+ *  `text` is always sent and is the copy the pipeline validates and records; `html`, when
+ *  present, is sent beside it as the rich alternative (mail clients pick one). */
 interface EmailTemplateRow {
     subject: string;
     text: string;
+    /** Optional HTML body with the same placeholders and sections; values are escaped when rendered. */
+    html?: string;
     enabled?: boolean;
 }
 /** The `groups`-row fields the email pipeline reads. */
@@ -2420,8 +2744,7 @@ interface EmailGroup {
     normsText?: string;
     emailTemplates: Record<string, EmailTemplateRow>;
 }
-/** `{{placeholder}}` substitution; unknown placeholders render empty. */
-declare function render(template: string, vars: Record<string, string>): string;
+
 /**
  * Re-render a template's body for history/preview (E4): the CRM comms history
  * reads back emails whose body predates `emailLog.body` by rendering the current
@@ -2451,6 +2774,8 @@ type DeliveryDecision = {
     to: string;
     subject: string;
     text: string;
+    /** The rendered HTML alternative, when the template carries its own HTML body. */
+    html?: string;
     /** True when redirected to the non-prod debug inbox. */
     redirected: boolean;
 };
@@ -2505,6 +2830,7 @@ declare function validateEmailReadiness(input: {
     templates: Record<string, {
         subject?: unknown;
         text?: unknown;
+        html?: unknown;
         enabled?: unknown;
     }>;
     groupValues: Record<string, string>;
@@ -2549,7 +2875,7 @@ interface NotifyDeps {
     from?: string;
     /** Runtime-local non-production inbox; never changes the shared chapter setting. */
     debugEmail?: string;
-    /** The HTML alternative sent beside the text part: {@link textToHtml} by default, a host renderer, or `false` for text-only mail. */
+    /** The HTML alternative sent beside the text part when the template has no `html` body of its own: {@link textToHtml} by default, a host renderer, or `false` for text-only mail. */
     renderHtml?: ((text: string) => string) | false;
     now: () => number;
     newId: () => string;
@@ -2618,6 +2944,25 @@ declare function normalizeChapterEmail(email: string): string;
  */
 declare function textToHtml(text: string): string;
 
+type Row = Record<string, unknown>;
+/** Money and tier facts frozen at checkout; every field is blank without a checkout. */
+interface CheckoutVariables {
+    /** `$900.00`, or "" for a free tier / no checkout. */
+    paymentAmount: string;
+    /** ` of $900.00`, so copy reads "payment of $900.00" or just "payment". */
+    paymentAmountSummary: string;
+    /** The tier's display name. */
+    tierName: string;
+    /** `paid` or `included` when the checkout carried a gift seat for another person, else "" (so `{{#namedSeat}}` hides). */
+    namedSeat: string;
+    /** The gift recipient's name as entered at checkout; "" without a seat. */
+    namedSeatRecipientName: string;
+}
+/** Read the frozen checkout intent (the exact terms the applicant consented to). */
+declare function frozenCheckoutVariables(db: ChapterDb, app: Row): Promise<CheckoutVariables>;
+/** Frozen checkout facts; the tier name falls back to the catalog when no checkout exists yet. */
+declare function checkoutVariables(db: ChapterDb, group: Row, app: Row): Promise<CheckoutVariables>;
+
 /**
  * Signals in one template's copy that mailbox filters weight against the sender:
  * shouting or over-punctuated subjects, fake reply prefixes, trigger phrases, insecure
@@ -2627,6 +2972,7 @@ declare function textToHtml(text: string): string;
 declare function emailSpamSignals(copy: {
     subject?: unknown;
     text?: unknown;
+    html?: unknown;
 }): EmailCopyIssue[];
 /**
  * Sender-setup signals that apply to every message a site sends: a no-reply From
@@ -4458,4 +4804,4 @@ declare function createMembershipAuthorityIntegration(): {
     seeds: never[];
 };
 
-export { ADMINISTRATOR_AUDIENCE, ADMISSION_GRANTS_PATH, ADMISSION_GRANTS_SCHEMA_VERSION, type AccountModel, type AdminNotificationTrigger, type AdmissionDecision, type AdmissionGrantDocument, type AdmissionGrantEnvelope, type AdmissionGrantInput, type AdmissionGrantReceipt, type AdmissionGrantRejection, type AdmissionGrantRevisionRow, type AdmissionGrantRow, type AdmissionGrantValidation, type Applicant, type ApplicationBookingPatch, type ApplicationRecord, type ApplicationSummary, type Attr, type AttrType, BUILDER_LIBRARY_ADMIN_PATH, BUILDER_LIBRARY_CONTROL_PATH, BUILDER_LIBRARY_MANIFEST_PATH, BUILDER_LIBRARY_PROMOTE_PATH, BUILDER_LIBRARY_SCHEMA_VERSION, type BuilderLibraryBrandAssetRef, type BuilderLibraryDocument, type BuilderLibraryEnvelope, type BuilderLibraryManifest, type BuilderLibraryPromotionProvenance, type BuilderLibraryReceipt, type BuilderLibraryResource, type BuilderLibraryResourceKind, type BuilderLibraryResourceProvenance, type BuilderLibraryResourceStatus, type BuilderLibraryScope, type BuilderLibrarySource, type BuilderLibrarySourceType, type BuilderLibraryTarget, type BuilderLibraryValidationOptions, type BuilderLibraryValidationResult, type BuilderLibraryViewer, type BuyerGiftClaim, CHAPTER_EMAIL_EVENTS, CHAPTER_FLOW_FIELDS_SCHEMA_VERSION, CHAPTER_PROMOTION_ADAPTER, type Chapter, type ChapterApplication, type ChapterAuth, type ChapterBrand, type ChapterBuilderLibrary, type ChapterCommercialParityRecord, type ChapterCommercialParitySnapshot, type ChapterConfig, type ChapterCopy, type ChapterCopyInput, type ChapterDb, type ChapterEmailEvent, type ChapterEmailIdentity, type ChapterEmails, type ChapterFieldFlow, type ChapterFlowField, type ChapterFlowFieldContract, type ChapterIntegrationDescriptor, type ChapterIntegrationOptions, type ChapterMemberContent, type ChapterMode, type ChapterNetwork, type ChapterNetworkReader, type ChapterNetworkTarget, type ChapterOperations, type ChapterPipeline, type ChapterPolicy, type ChapterPrices, type ChapterPromotionInput, type ChapterRunbookHints, type ChapterScheduling, type ChapterSends, type ChapterSignupControl, type ChapterTier, type ChapterTierConfig, type ClerkInviteInput, type ClerkMetadataInput, type ClerkResult, type ClerkRoleMetadata, type ClerkUserInput, type ClerkUserRecord, type CommercialIdentity, type CommercialObjectKind, type CommercialParityException, type CommercialParityExceptionKind, type CommercialParityPartition, type CommercialParityResult, type CompiledChapterBrandTokens, type ConfirmMembershipPaymentInput, DEFAULT_CHAPTER_COPY, DEFAULT_SHARE_FIELDS, type DashboardMetricData, type DashboardMetricSeries, type DbOp, type DbRules, type DbSchema, type DeliveryDecision, EDGE_UNPAIRED, type EdgeUnpaired, type EffectiveMemberContent, type EffectiveMemberContentPage, type EmailEventReadiness, type EmailGroup, type EmailReadiness, type EmailTemplate, type EmailTemplateRow, type Entity, type ExistingMeeting, type FederationEdge, GIFT_OFFER_CATALOG_VERSION, type GiftOffer, type GiftOfferCatalog, type GiftOfferTarget, type GiftOfferValidation, type GuardResult, type IntegrationDescriptor, type IntegrationProvision, type IntegrationSecret, type IntegrationSetting, type IntegrationSync, type IssuedMembershipOffer, JOURNEY_ENDINGS, JOURNEY_STAGES, type JoinConfigGroup, type JoinConfigTier, type JoinContinuation, type JourneyEnding, type JourneyStage, type LeaderCrmOptions, type LeaderFormationConfig, type LifecycleDeliveryResolution, type LiveEvent, MAX_GIFT_OFFERS, MEMBERSHIP_AUTHORITY_COLLECTIONS, MEMBERSHIP_AUTHORITY_PATH, MEMBERSHIP_PAGE_RENDERER, MEMBER_CONTENT_CONTROL_PATH, MEMBER_CONTENT_PATH, MEMBER_CONTENT_SCHEMA_VERSION, MEMBER_SELF_EDITABLE_FIELDS, MEMBER_SELF_READABLE_FIELDS, MEMBER_SYSTEM_AUTHORITY_MATRIX, MEMBER_SYSTEM_CONTRACT_VERSION, MEMBER_SYSTEM_RECORD_OWNERS, MEMBER_SYSTEM_RECOVERY_OBJECTIVES, type MailSender, type MeetingForReconcile, type MeetingRecord, type MeetingReschedulePatch, type MemberApplication, type MemberAuthorityValidation, type MemberContentDocument, type MemberContentEnvelope, type MemberContentPage, type MemberContentPageProjection, type MemberContentProjection, type MemberContentReceipt, type MemberContentRejection, type MemberContentSource, type MemberContentSourceType, type MemberContentTarget, type MemberContentTierAuthority, type MemberContentValidationOptions, type MemberContentValidationResult, type MemberContentViewer, type MemberFieldAuthority, type MemberFieldSelfAccess, type MemberFieldSensitivity, type MemberPageAudience, type MemberPageNavigation, type MemberPageUpsell, type MemberPageUpsellOffer, type MemberPageUpsellOverride, type MemberSession, type MemberStripeDisposition, type MemberStripeIdentity, type MemberStripeTarget, type MemberSystemAvailability, type MemberSystemAvailabilityInput, type MemberSystemEventReceiptInput, type MemberSystemEventReplayPlan, type MemberSystemMigrationPlan, type MemberSystemMigrationRow, type MemberSystemProjection, type MemberSystemRecoveryObjectives, type MemberSystemRollbackPlan, type MemberSystemScope, type MemberSystemWriteDisposition, type MemberSystemWriteIntent, type MemberSystemWriter, type MembershipAccessReceipt, type MembershipAuthorityHandlerOptions, type MembershipAuthorityPeer, type MembershipChapterEffect, type MembershipChapterEffectData, type MembershipCheckoutBinding, type MembershipCheckoutBindingInput, type MembershipCommercialOffer, type MembershipDiscountPolicyVersion, type MembershipEffectScope, type MembershipOfferIssuer, type MembershipOfferPreview, type MembershipOfferPreviewRequest, type MembershipOfferPreviewScope, type MembershipOfferRequest, type MembershipOfferingVersion, type MembershipPageDocument, type MembershipPageValidationOptions, type MembershipPageValidationResult, type MembershipPaymentReceipt, type MembershipQuoteTarget, type MembershipRefundReceipt, type MembershipRenewalReceipt, type MembershipTierAuthority, type MembershipTierCallout, type MembershipTierCapacity, type MembershipTierMarkdownResult, type MembershipTierPresentation, type MembershipTierVariant, type NamedSeatCheckoutReceipt, type NamedSeatCheckoutRequest, type NamedSeatEvidenceRequest, type NamedSeatInvitation, type NamedSeatInvitationRequest, type NamedSeatOffer, type NamedSeatOfferSeat, type NamedSeatRecipientReceipt, type NamedSeatRefundReceipt, type NamedSeatRegiftReceipt, type NetworkCommercialException, type NetworkCommercialFact, type NetworkCommercialProjectedRow, type NetworkCommercialProjection, type NetworkEditableField, type NetworkRecord, type NetworkRecordEdit, type NetworkRecordMutation, type NetworkRecordMutationResult, type NetworkRecordNote, type NetworkRecordPage, type NetworkRecordSort, type NetworkRollup, type NetworkRollupTarget, type NetworkSharedNote, type NetworkSnapshot, type NetworkStageTransition, type NetworkTargetTransportStatus, type NewMeetingRow, type NotifyDeps, type NotifyInput, type NotifyResult, type PaymentsGroup, type PrivateRoleMigrationInput, type PrivateRoleRuntimeProof, type ProjectionDeps, type PublicGiftOffer, REQUIRED_NOTICE_KINDS, type ReconcileDecision, type RequestMembershipOfferOptions, type RequiredNoticeKind, type ResolvedApplication, type ResolvedAuth, type ResolvedBuilderLibrary, type ResolvedLeaderFormation, type ResolvedMemberContent, type ResolvedMemberPageUpsell, type ResolvedNetwork, type ResolvedNetworkReader, type ResolvedNetworkTarget, type ResolvedOperations, type ResolvedPipeline, type ResolvedScheduling, type ResolvedSends, type ResolvedSignupControl, type RoleChangeContext, type Rule, SCHEDULING_DEFAULTS, SIGNUP_CONTROL_PATH, SIGNUP_CONTROL_SCHEMA_VERSION, SIGNUP_CONTROL_THEME_MARKER, SIGNUP_CONTROL_THEME_STYLE_ID, SILVER_SALT_P0_FIXTURE, type SchedulingErrors, type SecretMode, type SecretStore, type SessionUser, type SharedBusiness, type SharedPerson, type SharedRecord, type SharedRecordV1, type SharedRecordV2, type SignupControlApplication, type SignupControlDocument, type SignupControlEnvelope, type SignupControlPolicy, type SignupControlReceipt, type SignupControlRejection, type SignupControlRuntimeTarget, type SignupControlTheme, type SignupControlThemeHead, type SignupControlThemeMetadata, type SignupControlThemeOptions, type SignupControlThemeRevision, type SignupControlThemeStyleTarget, type SignupControlTier, type SignupControlValidation, type StripeEvent, type StripeResult, type SubmitResult, type TierGroup, type TierGroupRow, type WebhookEvent, addMembershipCalendarMonths, applicantProfile, applicationBookingUpdate, applicationFlowFields, applicationSummary, applyMembershipTierMarkdown, approveNetworkMembership, backfillCrm, bindMembershipCheckout, bookingDecision, brandTokens, bucketSeries, buildBuilderLibraryManifest, buildChapterCommercialParitySnapshot, buildGroupSeed, buildTierSeeds, builderLibraryDigest, canApprove, canBook, canChangeRole, canTransition, canViewBuilderLibraryResource, canceledPatch, canonicalBuilderLibrary, canonicalMemberContent, canonicalSignupControl, chapterBrandFromTokens, chapterDb, chapterEmailEvents, chapterFlowFieldContract, clampArray, classifyMemberStripeEvent, classifyMemberSystemWrite, clerkGetUser, clerkGetUserByEmail, clerkIntegration, clerkInviteRequest, clerkListUsers, clerkRoleMetadata, clerkSetRole, clerkUserRequest, commercialParityDigest, composeMemberContent, confirmMembershipPayment, createAdmissionGrantEnvelope, createBuilderLibraryEnvelope, createChapterIntegration, createClerkInvitation, createClerkUser, createMemberContentEnvelope, createMembershipAuthorityHandler, createMembershipAuthorityIntegration, createMembershipCommercialOffer, createSignupControlEnvelope, dashboardMetricData, defaultCrm, defineChapter, deliverabilityHeaders, drainMembershipEffects, edgeUnpaired, emailGroupFrom, emailSenderWarnings, emailSpamSignals, endForSlot, exportChapterPromotion, findAdmissionGrant, findApplicationRef, findGiftOffer, findTier, firstPaymentPatch, formatChapterCopy, formationFields, formationFlowFields, getVaultSecret, giftOfferActive, hasDisclaimerAck, hydrateSignupControlTheme, injectSignupControlThemeHead, introIdempotencyKey, isAdminRole, isAlreadySent, isRecipientFacing, isReconcilable, isSlotAvailable, isValidEmail, issueMembershipCommercialOffer, joinConfig, joinConfigTiers, leaderCrmConfig, listStripeObjects, listUnsubscribeHeader, loadLatestAdmissionRevision, loadOfferableTiers, loadTiers, materializeAdmissionGrants, meetingCreateRow, meetingRescheduleUpdate, memberApplication, memberContentDigest, memberContentDocument, memberSession, memberSystemAvailability, memberSystemRollbackPlan, membershipAuthorityEntities, membershipAuthorityRules, membershipCheckoutBindingId, membershipDiscountCouponId, membershipDiscountPolicyVersion, membershipOfferEntities, membershipOfferIdForRequest, membershipOfferRules, membershipOfferingVersion, membershipPageDocument, membershipTierPresentationFromMarkdown, namedSeatOfferDigest, networkCommercialSourceKey, networkMembershipId, networkSourceTag, normalizeAdmissionEmail, normalizeChapterEmail, normalizeNetworkCommercialStripeEvent, normalizeSharedRecord, normalizeWebhookEvent, offerableTiers, pairingCommand, paymentsReady, personInputFromApp, planDelivery, planMemberSystemEventReplay, planMemberSystemMigration, planPrivateRoleMigration, previewMembershipCommercialOffer, projectApplicant, projectBuilderLibraryDelivery, projectMemberContent, projectMemberSelf, projectNetworkCommercialEvents, projectSharedRecord, promoteBuilderLibraryResource, publicGiftOffers, readMembershipAccess, readMembershipChapterEffect, readNamedSeatAccess, readNamedSeatInvitation, readNamedSeatOffer, reconcileCommercialParitySnapshot, reconcileLifecycleDelivery, reconcileMeetings, reconcileMembershipBilling, reconcileMembershipRenewal, reconcileStripeSnapshot, refundNetworkMembership, refundedPatch, render, renderSignupControlThemeHead, renderSummary, renderTemplateBody, renewalPatch, requestMembershipAccess, requestMembershipApproval, requestMembershipCancellation, requestMembershipChapterEffect, requestMembershipCheckoutBinding, requestMembershipCommercialOffer, requestMembershipOfferPreview, requestMembershipPayment, requestMembershipRefund, requestMembershipRenewal, requestMembershipRestart, requestNamedSeatAcceptance, requestNamedSeatAccess, requestNamedSeatApproval, requestNamedSeatCheckout, requestNamedSeatDecline, requestNamedSeatInvitation, requestNamedSeatOffer, requestNamedSeatOperatorRefund, requestNamedSeatPayment, requestNamedSeatRefund, requestNamedSeatRegift, requestNamedSeatReservation, resolveApplication, resolveAuth, resolveBuilderLibrary, resolveChapterCopy, resolveJoinContinuation, resolveLeaderFormation, resolveMemberContent, resolveNetworkCommercialReadModel, resolveNetworkPersonRegistry, resolvePipeline, resolveScheduling, resolveSignupControl, resolveTiers, roleFromClaim, seatPurchaseDeadline, sendTemplated, sharedPersonInput, sharedRecordFromCrm, signupControlDigest, slotWindow, stageIndex, stripeCall, subAnnualCents, submitApplication, subscriptionIdempotencyKey, syncApplicationToCrm, textToHtml, tierIsFree, tierPayable, updateClerkUserMetadata, updateClerkUserMetadataByEmail, validateAdmissionGrantDocument, validateBuilderLibraryDocument, validateEmailReadiness, validateGiftOfferCatalog, validateMemberContentDocument, validateMemberSystemAuthority, validateMembershipPageDocument, validateScheduling, validateSignupControlDocument, verifyIssuedMembershipOffer, verifyMembershipAccessReceipt, verifyMembershipCheckoutBinding, verifyMembershipPaymentReceipt, webhookMutationId };
+export { ADMINISTRATOR_AUDIENCE, ADMISSION_GRANTS_PATH, ADMISSION_GRANTS_SCHEMA_VERSION, type AccountModel, type AdminNotificationTrigger, type AdmissionDecision, type AdmissionGrantDocument, type AdmissionGrantEnvelope, type AdmissionGrantInput, type AdmissionGrantReceipt, type AdmissionGrantRejection, type AdmissionGrantRevisionRow, type AdmissionGrantRow, type AdmissionGrantValidation, type Applicant, type ApplicationBookingPatch, type ApplicationRecord, type ApplicationSummary, type Attr, type AttrType, BUILDER_LIBRARY_ADMIN_PATH, BUILDER_LIBRARY_CONTROL_PATH, BUILDER_LIBRARY_MANIFEST_PATH, BUILDER_LIBRARY_PROMOTE_PATH, BUILDER_LIBRARY_SCHEMA_VERSION, type BuilderLibraryBrandAssetRef, type BuilderLibraryDocument, type BuilderLibraryEnvelope, type BuilderLibraryManifest, type BuilderLibraryPromotionProvenance, type BuilderLibraryReceipt, type BuilderLibraryResource, type BuilderLibraryResourceKind, type BuilderLibraryResourceProvenance, type BuilderLibraryResourceStatus, type BuilderLibraryScope, type BuilderLibrarySource, type BuilderLibrarySourceType, type BuilderLibraryTarget, type BuilderLibraryValidationOptions, type BuilderLibraryValidationResult, type BuilderLibraryViewer, type BuyerGiftClaim, CHAPTER_EMAIL_EVENTS, CHAPTER_FLOW_FIELDS_SCHEMA_VERSION, CHAPTER_PROMOTION_ADAPTER, type Chapter, type ChapterApplication, type ChapterAuth, type ChapterBrand, type ChapterBuilderLibrary, type ChapterCommercialParityRecord, type ChapterCommercialParitySnapshot, type ChapterConfig, type ChapterCopy, type ChapterCopyInput, type ChapterDb, type ChapterEmailEvent, type ChapterEmailIdentity, type ChapterEmails, type ChapterFieldFlow, type ChapterFlowField, type ChapterFlowFieldContract, type ChapterIntegrationDescriptor, type ChapterIntegrationOptions, type ChapterMemberContent, type ChapterMode, type ChapterNetwork, type ChapterNetworkReader, type ChapterNetworkTarget, type ChapterOperations, type ChapterPipeline, type ChapterPolicy, type ChapterPrices, type ChapterPromotionInput, type ChapterRunbookHints, type ChapterScheduling, type ChapterSends, type ChapterSignupControl, type ChapterTier, type ChapterTierConfig, type CheckoutVariables, type CleanImage, type ClerkInviteInput, type ClerkMetadataInput, type ClerkResult, type ClerkRoleMetadata, type ClerkUserInput, type ClerkUserRecord, type CommercialIdentity, type CommercialObjectKind, type CommercialParityException, type CommercialParityExceptionKind, type CommercialParityPartition, type CommercialParityResult, type CompiledChapterBrandTokens, type ConfirmMembershipPaymentInput, DEFAULT_CHAPTER_COPY, DEFAULT_PORTAL_COPY, DEFAULT_SHARE_FIELDS, type DashboardMetricData, type DashboardMetricSeries, type DbOp, type DbRules, type DbSchema, type DeliveryDecision, EDGE_UNPAIRED, type EdgeUnpaired, type EffectiveMemberContent, type EffectiveMemberContentPage, type EmailEventReadiness, type EmailGroup, type EmailReadiness, type EmailTemplate, type EmailTemplateRow, type Entity, type ExistingMeeting, type FederationEdge, GIFT_OFFER_CATALOG_VERSION, type GiftOffer, type GiftOfferCatalog, type GiftOfferTarget, type GiftOfferValidation, type GuardResult, HTML_BODY_LIMIT, HUB_MEMBERS_PATH, type IntegrationDescriptor, type IntegrationProvision, type IntegrationSecret, type IntegrationSetting, type IntegrationSync, type IssuedMembershipOffer, JOURNEY_ENDINGS, JOURNEY_STAGES, type JoinConfigGroup, type JoinConfigTier, type JoinContinuation, type JourneyEnding, type JourneyStage, type LeaderCrmOptions, type LeaderFormationConfig, type LifecycleDeliveryResolution, type LiveEvent, MAX_GIFT_OFFERS, MAX_PHOTO_BYTES, MAX_PROMPT_ANSWER, MEMBERSHIP_AUTHORITY_COLLECTIONS, MEMBERSHIP_AUTHORITY_PATH, MEMBERSHIP_PAGE_RENDERER, MEMBER_CONTENT_CONTROL_PATH, MEMBER_CONTENT_PATH, MEMBER_CONTENT_SCHEMA_VERSION, MEMBER_PAGE_FEATURES, MEMBER_PAGE_ICONS, MEMBER_PAGE_TAGS, MEMBER_PHOTO_PATH, MEMBER_PROFILE_FIELDS, MEMBER_PROFILE_PATH, MEMBER_SELF_EDITABLE_FIELDS, MEMBER_SELF_READABLE_FIELDS, MEMBER_SYSTEM_AUTHORITY_MATRIX, MEMBER_SYSTEM_CONTRACT_VERSION, MEMBER_SYSTEM_RECORD_OWNERS, MEMBER_SYSTEM_RECOVERY_OBJECTIVES, type MailSender, type MeetingForReconcile, type MeetingRecord, type MeetingReschedulePatch, type MemberApplication, type MemberAuthorityValidation, type MemberContentDocument, type MemberContentEnvelope, type MemberContentPage, type MemberContentPageProjection, type MemberContentProjection, type MemberContentReceipt, type MemberContentRejection, type MemberContentSchemaVersion, type MemberContentSection, type MemberContentSource, type MemberContentSourceType, type MemberContentTarget, type MemberContentTierAuthority, type MemberContentValidationOptions, type MemberContentValidationResult, type MemberContentViewer, type MemberFieldAuthority, type MemberFieldSelfAccess, type MemberFieldSensitivity, type MemberPageAudience, type MemberPageFeature, type MemberPageFeatureName, type MemberPageIcon, type MemberPageKind, type MemberPageNavigation, type MemberPagePlaceholder, type MemberPageTag, type MemberPageUpsell, type MemberPageUpsellOffer, type MemberPageUpsellOverride, type MemberProfileField, type MemberProfilePatch, type MemberProfilePrompt, type MemberSession, type MemberStripeDisposition, type MemberStripeIdentity, type MemberStripeTarget, type MemberSystemAvailability, type MemberSystemAvailabilityInput, type MemberSystemEventReceiptInput, type MemberSystemEventReplayPlan, type MemberSystemMigrationPlan, type MemberSystemMigrationRow, type MemberSystemProjection, type MemberSystemRecoveryObjectives, type MemberSystemRollbackPlan, type MemberSystemScope, type MemberSystemWriteDisposition, type MemberSystemWriteIntent, type MemberSystemWriter, type MembershipAccessReceipt, type MembershipAuthorityHandlerOptions, type MembershipAuthorityPeer, type MembershipChapterEffect, type MembershipChapterEffectData, type MembershipCheckoutBinding, type MembershipCheckoutBindingInput, type MembershipCommercialOffer, type MembershipDiscountPolicyVersion, type MembershipEffectScope, type MembershipOfferIssuer, type MembershipOfferPreview, type MembershipOfferPreviewRequest, type MembershipOfferPreviewScope, type MembershipOfferRequest, type MembershipOfferingVersion, type MembershipPageDocument, type MembershipPageValidationOptions, type MembershipPageValidationResult, type MembershipPaymentReceipt, type MembershipQuoteTarget, type MembershipRefundReceipt, type MembershipRenewalReceipt, type MembershipTierAuthority, type MembershipTierCallout, type MembershipTierCapacity, type MembershipTierMarkdownResult, type MembershipTierPresentation, type MembershipTierVariant, type NamedSeatCheckoutReceipt, type NamedSeatCheckoutRequest, type NamedSeatEvidenceRequest, type NamedSeatInvitation, type NamedSeatInvitationRequest, type NamedSeatOffer, type NamedSeatOfferSeat, type NamedSeatRecipientReceipt, type NamedSeatRefundReceipt, type NamedSeatRegiftReceipt, type NetworkCommercialException, type NetworkCommercialFact, type NetworkCommercialProjectedRow, type NetworkCommercialProjection, type NetworkEditableField, type NetworkRecord, type NetworkRecordEdit, type NetworkRecordMutation, type NetworkRecordMutationResult, type NetworkRecordNote, type NetworkRecordPage, type NetworkRecordSort, type NetworkRollup, type NetworkRollupTarget, type NetworkSharedNote, type NetworkSnapshot, type NetworkStageTransition, type NetworkTargetTransportStatus, type NewMeetingRow, type NotifyDeps, type NotifyInput, type NotifyResult, PHOTO_SIZE, type PaymentsGroup, type PortalCopy, type PortalIdentity, type PortalMember, type PortalMemberResult, type PrivateRoleMigrationInput, type PrivateRoleRuntimeProof, type ProjectionDeps, type PublicGiftOffer, REQUIRED_NOTICE_KINDS, type ReconcileDecision, type RequestMembershipOfferOptions, type RequiredNoticeKind, type ResolvedApplication, type ResolvedAuth, type ResolvedBuilderLibrary, type ResolvedLeaderFormation, type ResolvedMemberContent, type ResolvedMemberPageUpsell, type ResolvedNetwork, type ResolvedNetworkReader, type ResolvedNetworkTarget, type ResolvedOperations, type ResolvedPipeline, type ResolvedScheduling, type ResolvedSends, type ResolvedSignupControl, type RoleChangeContext, type Rule, SCHEDULING_DEFAULTS, SIGNUP_CONTROL_PATH, SIGNUP_CONTROL_SCHEMA_VERSION, SIGNUP_CONTROL_THEME_MARKER, SIGNUP_CONTROL_THEME_STYLE_ID, SILVER_SALT_P0_FIXTURE, type SchedulingErrors, type SecretMode, type SecretStore, type SessionUser, type SharedBusiness, type SharedPerson, type SharedRecord, type SharedRecordV1, type SharedRecordV2, type SignupControlApplication, type SignupControlDocument, type SignupControlEnvelope, type SignupControlPolicy, type SignupControlReceipt, type SignupControlRejection, type SignupControlRuntimeTarget, type SignupControlTheme, type SignupControlThemeHead, type SignupControlThemeMetadata, type SignupControlThemeOptions, type SignupControlThemeRevision, type SignupControlThemeStyleTarget, type SignupControlTier, type SignupControlValidation, type StripeEvent, type StripeResult, type SubmitResult, type TierGroup, type TierGroupRow, type WebhookEvent, addMembershipCalendarMonths, applicantProfile, applicationBookingUpdate, applicationFlowFields, applicationSummary, applyMembershipTierMarkdown, approveNetworkMembership, backfillCrm, bindMembershipCheckout, bookingDecision, brandTokens, bucketSeries, buildBuilderLibraryManifest, buildChapterCommercialParitySnapshot, buildGroupSeed, buildTierSeeds, builderLibraryDigest, canApprove, canBook, canChangeRole, canTransition, canViewBuilderLibraryResource, canceledPatch, canonicalBuilderLibrary, canonicalMemberContent, canonicalSignupControl, chapterBrandFromTokens, chapterDb, chapterEmailEvents, chapterFlowFieldContract, checkoutVariables, clampArray, classifyMemberStripeEvent, classifyMemberSystemWrite, cleanImage, clerkGetUser, clerkGetUserByEmail, clerkIntegration, clerkInviteRequest, clerkListUsers, clerkRoleMetadata, clerkSetRole, clerkUserRequest, commercialParityDigest, composeMemberContent, composeMemberSections, confirmMembershipPayment, createAdmissionGrantEnvelope, createBuilderLibraryEnvelope, createChapterIntegration, createClerkInvitation, createClerkUser, createMemberContentEnvelope, createMembershipAuthorityHandler, createMembershipAuthorityIntegration, createMembershipCommercialOffer, createSignupControlEnvelope, dashboardMetricData, defaultCrm, defineChapter, deliverabilityHeaders, drainMembershipEffects, edgeUnpaired, emailGroupFrom, emailSenderWarnings, emailSpamSignals, endForSlot, exportChapterPromotion, findAdmissionGrant, findApplicationRef, findGiftOffer, findTier, firstPaymentPatch, formatChapterCopy, formationFields, formationFlowFields, frozenCheckoutVariables, getVaultSecret, giftOfferActive, hasDisclaimerAck, htmlBodyIssues, hydrateSignupControlTheme, initialsOf, injectSignupControlThemeHead, introIdempotencyKey, isAdminRole, isAlreadySent, isRecipientFacing, isReconcilable, isSlotAvailable, isValidEmail, issueMembershipCommercialOffer, joinConfig, joinConfigTiers, leaderCrmConfig, listStripeObjects, listUnsubscribeHeader, loadLatestAdmissionRevision, loadOfferableTiers, loadTiers, materializeAdmissionGrants, meetingCreateRow, meetingRescheduleUpdate, memberApplication, memberContentDigest, memberContentDocument, memberFeatureAccess, memberPageAllowed, memberPortalEntities, memberSession, memberSystemAvailability, memberSystemRollbackPlan, membershipAuthorityEntities, membershipAuthorityRules, membershipCheckoutBindingId, membershipDiscountCouponId, membershipDiscountPolicyVersion, membershipOfferEntities, membershipOfferIdForRequest, membershipOfferRules, membershipOfferingVersion, membershipPageDocument, membershipTierPresentationFromMarkdown, nameKey, namedSeatOfferDigest, networkCommercialSourceKey, networkMembershipId, networkSourceTag, normalizeAdmissionEmail, normalizeChapterEmail, normalizeNetworkCommercialStripeEvent, normalizeSharedRecord, normalizeWebhookEvent, offerableTiers, pairingCommand, paymentsReady, personInputFromApp, planDelivery, planMemberSystemEventReplay, planMemberSystemMigration, planPrivateRoleMigration, previewMembershipCommercialOffer, projectApplicant, projectBuilderLibraryDelivery, projectMemberContent, projectMemberSelf, projectNetworkCommercialEvents, projectSharedRecord, promoteBuilderLibraryResource, publicGiftOffers, readMembershipAccess, readMembershipChapterEffect, readNamedSeatAccess, readNamedSeatInvitation, readNamedSeatOffer, reconcileCommercialParitySnapshot, reconcileLifecycleDelivery, reconcileMeetings, reconcileMembershipBilling, reconcileMembershipRenewal, reconcileStripeSnapshot, refundNetworkMembership, refundedPatch, render, renderHtmlBody, renderSignupControlThemeHead, renderSummary, renderTemplateBody, renewalPatch, requestMembershipAccess, requestMembershipApproval, requestMembershipCancellation, requestMembershipChapterEffect, requestMembershipCheckoutBinding, requestMembershipCommercialOffer, requestMembershipOfferPreview, requestMembershipPayment, requestMembershipRefund, requestMembershipRenewal, requestMembershipRestart, requestNamedSeatAcceptance, requestNamedSeatAccess, requestNamedSeatApproval, requestNamedSeatCheckout, requestNamedSeatDecline, requestNamedSeatInvitation, requestNamedSeatOffer, requestNamedSeatOperatorRefund, requestNamedSeatPayment, requestNamedSeatRefund, requestNamedSeatRegift, requestNamedSeatReservation, resolveApplication, resolveAuth, resolveBuilderLibrary, resolveChapterCopy, resolveJoinContinuation, resolveLeaderFormation, resolveMemberContent, resolveMemberPortal, resolveNetworkCommercialReadModel, resolveNetworkPersonRegistry, resolvePipeline, resolveScheduling, resolveSignupControl, resolveTiers, roleFromClaim, seatPurchaseDeadline, sendTemplated, sharedPersonInput, sharedRecordFromCrm, shortName, signupControlDigest, slotWindow, stageIndex, stripeCall, subAnnualCents, submitApplication, subscriptionIdempotencyKey, syncApplicationToCrm, textToHtml, tierIsFree, tierPayable, updateClerkUserMetadata, updateClerkUserMetadataByEmail, validateAdmissionGrantDocument, validateBuilderLibraryDocument, validateEmailReadiness, validateGiftOfferCatalog, validateMemberContentDocument, validateMemberSystemAuthority, validateMembershipPageDocument, validateProfilePatch, validateScheduling, validateSignupControlDocument, verifyIssuedMembershipOffer, verifyMembershipAccessReceipt, verifyMembershipCheckoutBinding, verifyMembershipPaymentReceipt, webhookMutationId };